Use protected runners for provisioning
We don't want to expose our Digital Ocean token and other credentials to any unprotected runners since they have such broad access.
How to register an account on GitLab. To prevent spam, new accounts are locked until approved by an admin or the approver bot. You can also file an unlock request to expedite access.
Support: mw:GitLab, how to host a project on GitLab, #wikimedia-gitlab on libera.chat, #GitLab on Phabricator.
We don't want to expose our Digital Ocean token and other credentials to any unprotected runners since they have such broad access.